Overview

overview

10

Static

static

10

1896-97-0x...ry.exe

windows7-x64

1

1896-97-0x...ry.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    1896-97-0x0000000000370000-0x00000000003A0000-memory.dmp

  • Size

    192KB

  • MD5

    0cd6ec96fe76753fe079076edb0a424b

  • SHA1

    eef787911457cb15794108b79b9cf1e04704d5e6

  • SHA256

    27cb08c14d4ed9aa87694be5975fa3702c09530ab638f5baed3b7959f89b98b1

  • SHA512

    4fc1a5986105c810abf98b5a76d7851678e10a390b2cdd8ce22777a0a43d6264771ef9f7102623b8956abdd6ac17eea0cc930458cc76305e4ee424a8dce14209

  • SSDEEP

    1536:+hbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkRO8e8h3:+lEebE6Cyk9i5/uGxNMS3azN58e8h3

Score
10/10
brunoredline

Malware Config

Extracted

Family

redline

Botnet

bruno

C2

83.97.73.134:19071

Attributes
  • auth_value

    b23e240c277e85ce9d49d6165c0a2b48

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1896-97-0x0000000000370000-0x00000000003A0000-memory.dmp
    .exe windows x86


    Headers

    Sections